Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/056e04cff06631e43a1ac836a280ec60670314b6.roa
File:                     056e04cff06631e43a1ac836a280ec60670314b6.roa (raw, json)
Hash identifier:          DxnbniAsNyGPvziQKYOh9B/8C9tW9G1t1yxYT/DyCZ4=
Subject key identifier:   23:98:D9:E0:3D:A3:2E:29:AC:99:B9:0A:C3:53:BE:BB:B0:10:1D:80
Certificate issuer:       /CN=b00787e44927a876cbce4a821c14b22c52096620
Certificate serial:       04C8BE
Authority key identifier: 41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/056e04cff06631e43a1ac836a280ec60670314b6.roa
Signing time:             Thu 12 Oct 2023 15:02:58 +0000
ROA not before:           Wed 11 Oct 2023 15:02:58 +0000
ROA not after:            Sun 12 Oct 2025 15:02:58 +0000
asID:                     16629
IP address blocks:        190.171.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313534 (0x4c8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b00787e44927a876cbce4a821c14b22c52096620
        Validity
            Not Before: Oct 11 15:02:58 2023 GMT
            Not After : Oct 12 15:02:58 2025 GMT
        Subject: CN=056e04cff06631e43a1ac836a280ec60670314b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a4:dd:0e:51:13:9c:34:ac:cd:7f:31:d7:37:
                    4e:2f:78:e7:29:b9:0c:8a:5b:32:42:e7:42:cc:fd:
                    ab:60:7b:83:ba:d3:3e:0f:17:2c:cd:58:43:4f:85:
                    49:aa:ff:0f:f4:3e:bc:25:76:78:91:69:1c:26:ce:
                    cc:bb:e6:e1:f5:86:0a:2e:75:b2:6f:2e:4d:5d:98:
                    b5:22:53:2c:28:ec:fb:61:41:89:2e:11:8b:3c:37:
                    cf:87:68:77:4d:f2:48:9d:8d:7d:0d:be:3a:75:f5:
                    74:dd:30:72:d9:5c:ba:fa:aa:b1:39:94:5a:6f:48:
                    f2:90:4d:9d:80:31:39:21:aa:fb:ed:67:4e:ba:c2:
                    fb:97:06:9f:66:f8:e1:bf:f6:12:b9:99:dd:a6:a2:
                    2f:80:8b:79:9e:d3:91:85:89:e8:f6:5a:c9:03:1f:
                    ae:20:b2:75:82:d0:76:0c:04:f4:85:86:5f:0b:66:
                    d6:60:53:c6:4e:ed:35:7d:8d:4e:ea:60:81:75:95:
                    f9:f1:39:45:46:46:b9:4a:4e:fa:6d:42:bc:af:cd:
                    05:f3:cf:a0:5b:69:87:b0:5c:c5:fc:3f:c6:cf:f3:
                    39:c0:1c:af:f0:af:91:57:c5:89:a4:1d:cc:15:cc:
                    3b:25:41:e8:08:ad:49:72:68:15:85:47:44:d7:ed:
                    25:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:98:D9:E0:3D:A3:2E:29:AC:99:B9:0A:C3:53:BE:BB:B0:10:1D:80
            X509v3 Authority Key Identifier:
                keyid:41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/056e04cff06631e43a1ac836a280ec60670314b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:73:c7:77:a7:9c:d0:09:a8:c7:c4:63:41:92:de:14:6b:40:
         31:ba:52:51:d5:b1:35:e1:99:54:5d:fb:c1:4d:b9:02:e5:95:
         23:60:89:47:5c:85:4f:63:87:95:4b:05:92:a6:cf:d1:5d:10:
         f5:5c:15:fc:ca:34:74:8f:ba:13:f1:25:59:0a:2f:74:43:23:
         70:ba:3c:f1:c6:98:fc:c7:84:cf:7b:f9:67:0b:fa:5d:ee:3a:
         f1:d5:7d:c1:f2:05:be:dc:46:39:76:02:07:11:1a:dd:0d:a6:
         72:e1:7f:82:71:70:0e:1d:09:b5:9c:a3:cd:6e:6d:45:f0:9c:
         b9:00:b4:5f:f4:f4:ce:a2:e3:9b:44:06:35:0e:19:d3:e1:33:
         a7:9d:37:5d:d0:ca:10:0e:ce:69:ec:2e:f4:1b:7e:55:d4:ba:
         f1:ba:8a:51:59:d4:9c:c2:22:c4:25:77:9f:1f:57:fc:ef:5b:
         d8:3c:67:b5:53:0a:fa:84:cd:a1:49:11:6c:2c:15:c8:2d:f9:
         ad:f7:66:78:81:fe:e6:3c:c6:82:f6:61:11:cb:59:f3:0d:e0:
         4b:03:3f:6d:8f:df:3c:79:0f:3d:e1:54:45:05:b9:00:87:c4:
         36:5f:4d:0e:1a:d6:0a:33:21:dc:66:5c:16:f9:a8:b6:7a:2e:
         c2:df:07:ce
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDBMi+MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGIw
MDc4N2U0NDkyN2E4NzZjYmNlNGE4MjFjMTRiMjJjNTIwOTY2MjAwHhcNMjMxMDEx
MTUwMjU4WhcNMjUxMDEyMTUwMjU4WjAzMTEwLwYDVQQDEygwNTZlMDRjZmYwNjYz
MWU0M2ExYWM4MzZhMjgwZWM2MDY3MDMxNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhaTdDlETnDSszX8x1zdOL3jnKbkMilsyQudCzP2rYHuDutM+
DxcszVhDT4VJqv8P9D68JXZ4kWkcJs7Mu+bh9YYKLnWyby5NXZi1IlMsKOz7YUGJ
LhGLPDfPh2h3TfJInY19Db46dfV03TBy2Vy6+qqxOZRab0jykE2dgDE5Iar77WdO
usL7lwafZvjhv/YSuZndpqIvgIt5ntORhYno9lrJAx+uILJ1gtB2DAT0hYZfC2bW
YFPGTu01fY1O6mCBdZX58TlFRka5Sk76bUK8r80F88+gW2mHsFzF/D/Gz/M5wByv
8K+RV8WJpB3MFcw7JUHoCK1JcmgVhUdE1+0ltwIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCOY2eA9oy4prJm5CsNTvruwEB2AMB8GA1UdIwQYMBaAFEF6lnl3u3kWpfZ9
G8/5OK0vpAm1MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYjAwNzg3
ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYyMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTdiZjFlMzktZGMxNS00YzJlLTk4MWQtYWNjOWE3
ZmY0NmZhLzA1NmUwNGNmZjA2NjMxZTQzYTFhYzgzNmEyODBlYzYwNjcwMzE0YjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85N2JmMWUzOS1kYzE1LTRjMmUtOTgxZC1hY2M5
YTdmZjQ2ZmEvYjAwNzg3ZTQ0OTI3YTg3NmNiY2U0YTgyMWMxNGIyMmM1MjA5NjYy
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEBr6rgDANBgkqhkiG9w0BAQsFAAOCAQEAZnPHd6ec0Amox8Rj
QZLeFGtAMbpSUdWxNeGZVF37wU25AuWVI2CJR1yFT2OHlUsFkqbP0V0Q9VwV/Mo0
dI+6E/ElWQovdEMjcLo88caY/MeEz3v5Zwv6Xe468dV9wfIFvtxGOXYCBxEa3Q2m
cuF/gnFwDh0JtZyjzW5tRfCcuQC0X/T0zqLjm0QGNQ4Z0+Ezp503XdDKEA7Oaewu
9Bt+VdS68bqKUVnUnMIixCV3nx9X/O9b2DxntVMK+oTNoUkRbCwVyC35rfdmeIH+
5jzGgvZhEctZ8w3gSwM/bY/fPHkPPeFURQW5AIfENl9NDhrWCjMh3GZcFvmotnou
wt8Hzg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-ams.rpki-client.org